Just an heads-up here, the MIAB config scripts overwrite configuation files. So whenever you upgrade the server don’t forget to redo the changes.
Also a good idea to try and get people to update their client software so that when everyones ready you can ditch TLS1.0 for good.